Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c048ba29-0c53-3550-852d-b98d6f5320f9.roa
File: c048ba29-0c53-3550-852d-b98d6f5320f9.roa (raw, json)
Hash identifier: pdAh0WAxy83v/kdzFQMLgEhXf6PmMKg3h02mKQcXynM=
Subject key identifier: EE:75:87:62:DE:43:28:19:56:BE:DF:00:00:E1:8E:43:F8:03:66:21
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837BDB99A7202048A45A7E41F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c048ba29-0c53-3550-852d-b98d6f5320f9.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 29 Jan 2023 05:00:00 +0000
asID: 21723
IP address blocks: 208.181.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:bd:b9:9a:72:02:04:8a:45:a7:e4:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 29 05:00:00 2023 GMT
Subject: CN=1ace5d9e-79bd-488d-8739-d46685f1a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:20:49:9b:ed:51:51:a6:fe:50:45:98:57:
2a:ad:8b:d8:f4:92:17:d7:de:2f:ac:f8:86:57:7c:
e5:a0:ea:41:eb:e2:a6:3f:c9:a8:ca:49:1a:98:f9:
c8:5d:05:37:b1:8e:97:74:0b:7c:c4:02:05:d2:e1:
c8:1d:14:71:4a:36:5b:08:de:28:f5:ae:30:25:91:
7c:25:e2:2a:93:85:3d:d0:ce:80:74:c9:f7:da:9d:
92:e0:ec:38:35:10:0d:f1:97:64:53:93:85:c5:b0:
a3:3e:c9:bf:d1:b7:2c:62:68:ca:4a:8d:d6:5f:dc:
8c:40:2c:a4:88:41:e3:74:b8:72:55:1e:32:8f:61:
a7:45:a8:a0:27:85:d4:ea:2d:25:73:38:73:dc:e3:
ce:67:80:25:29:38:d0:f5:e2:ae:08:66:9c:6b:c3:
87:5c:4f:75:ac:e5:89:12:4f:df:a4:ca:0f:20:03:
d6:0f:1e:b7:e2:54:be:6f:e5:65:cb:a6:23:7b:b9:
21:79:00:f1:46:58:b8:b1:7d:87:31:b9:36:f2:f9:
44:4d:c9:75:fd:a8:03:bd:b1:76:95:fa:c7:e0:00:
05:f6:db:bf:90:1f:46:68:2d:12:66:bf:0f:38:a3:
2a:2d:f7:22:f6:10:51:b7:c4:11:eb:fe:b2:d1:43:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:87:62:DE:43:28:19:56:BE:DF:00:00:E1:8E:43:F8:03:66:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c048ba29-0c53-3550-852d-b98d6f5320f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:9e:82:98:16:5b:d5:a5:a3:d4:10:de:f3:68:f4:0e:0d:85:
7c:b2:79:57:0b:f5:7a:62:33:1b:c5:bd:2c:aa:ae:13:14:3d:
50:74:62:f0:80:00:24:8f:c0:8e:33:97:60:c9:06:ca:c4:6e:
da:ae:f5:4f:dc:d7:0d:92:cd:87:a9:9b:25:a6:e7:33:e6:e6:
57:f3:f4:25:47:2d:48:0e:e4:85:40:7a:53:33:b4:0d:f1:ee:
81:49:18:84:82:33:52:74:fc:a6:62:a5:40:71:31:e3:ec:97:
29:b3:b3:df:14:d8:79:b6:8f:5a:7b:1b:81:48:e9:82:08:1f:
f3:10:8b:74:84:c0:df:93:ce:8c:0c:90:a5:66:df:37:b6:81:
17:54:99:7a:b4:64:5d:85:18:4b:6a:e9:15:9c:02:6a:67:67:
84:a1:6d:95:70:97:ac:16:89:42:9d:1e:37:fa:fd:bc:1c:da:
a7:9a:d0:39:f2:45:89:45:3b:ec:18:84:8d:cf:7a:55:46:ab:
ef:b6:17:2e:8c:eb:61:e6:6f:35:9e:e1:3e:c1:95:aa:f9:75:
46:bc:9f:c2:04:f1:8e:81:b1:e6:f3:2d:03:4e:64:27:d2:f9:
fe:28:c4:f8:1b:7b:0f:6c:76:07:f9:07:7f:f0:14:c4:fc:2c:
db:cc:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:43 2025 by rpki-client